PowerDNS / pdns

PowerDNS Authoritative, PowerDNS Recursor, dnsdist
https://www.powerdns.com/
GNU General Public License v2.0
3.7k stars 908 forks source link

auth, rec: no ECDSA with OpenSSL 3.3 #14084

Open Habbie opened 6 months ago

Habbie commented 6 months ago

Short description

In OpenSSL 3.3 (at least as packaged in Alpine Edge and Debian Experimental), pkg-config libcrypto --variable=prefix returns nothing instead of /usr. This causes us to fail to find ecdsa.h

Environment

Steps to reproduce

  1. build as usual

Expected behaviour

Working ECDSA, passing tests.

Actual behaviour

checking for /include/openssl/ecdsa.h... no

and the generic signers test fails. Note the path, it's missing /usr at the beginning.

Other information

--with-libcrypto=/usr works around the issue

rgacogne commented 6 months ago

Might be related to https://github.com/openssl/openssl/issues/23569

rgacogne commented 6 months ago

There was a big refactoring in https://github.com/openssl/openssl/commit/2ac569a67b9d0980efa2d8061a6a61e0645f37a7, clearly. I'm not going to dive into that for now.

Habbie commented 6 months ago

workaround for Alpine: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/64646